Senior Security Engineer, Gemini

• BA/BS degree or equivalent practical experience
• 5 years of experience in the cyber security field developing and/or updating cyber security related documentation, policies, procedures and standards
• Familiarity with Data privacy regulations such as GDPR, CCPA etc
• Familiarity with SQL, Python or any other programming language
• Operational knowledge of systems, databases, and network security best practices
• Strong analytical and creative problem solving skills
• Strong interpersonal skills to interact with customers, senior level personnel, auditors, and team members
• Strong organization skills to prioritize work and balance complex projects
• Ability to work independently and as part of a broader team

Desirable

• The successful candidate will work alongside the rest of the GRC team to ensure policies, procedures, and guidelines align with regulatory requirements and security frameworks; assess internal and external risks; and ensure compliance with security regulations
• This individual will work with other internal teams to align security goals and objectives with business stakeholders
• Advise Gemini’s security team and leadership on additional security governance measures
• Serve as a primary point of contact for security issues that require governance remediation
• Establish and maintain data governance frameworks and best practices for ensuring data quality, integrity, and security
• Demonstrate proficiency in database SQL and related programming languages (e.g., Python, R) for advanced data querying, manipulation, and security analysis
• Develop and maintain security governance dashboards and metrics to measure data security, compliance, and the overall effectiveness of security protocols
• Create automated solutions and facilitate the integration of data analytics systems to uphold data privacy and governance requirements
• Collaborate with cross-functional teams to identify and document data requirements, standards, and processes
• Design and manage a comprehensive data taxonomy for classifying and organizing data assets effectively
• Create and maintain a centralized data dictionary with detailed definitions, metadata, and lineage information for critical data elements
• Implement data governance tools and technologies to support data profiling, lineage tracking, and data quality monitoring
• Enhance and maintain Gemini’s security policies, standards and guidelines
• Conduct data protection impact assessments (DPIAs) and maintain records of processing activities (ROPAs) to recognize and alleviate potential security or data privacy weaknesses